Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
File:                     GZgd6LdyA5RZREi3oOYlwzo43GY.mft (raw, json)
Hash identifier:          ddGFJQ1lR8IS0Z23GGI/cgnfQKHii4WQrdI9JH9FWV4=
Subject key identifier:   DC:17:E7:39:E7:66:74:4A:D7:7C:81:48:AA:9A:2A:E4:5B:D4:BC:E4
Authority key identifier: 19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66
Certificate issuer:       /CN=19981de8b7720394594448b7a0e625c33a38dc66
Certificate serial:       019F8FEC42042EF52813A194D853867A37EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
Manifest number:          0566
Signing time:             Thu 23 Jul 2026 17:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:52 +0000
Files and hashes:         1: GZgd6LdyA5RZREi3oOYlwzo43GY.crl (hash: kQ5APQe4aDJ0cWzfArrgStphU6a9q/Qpwjf1Xcis1/s=)
                          2: ps8p5Yxss_yS4gX9BmkqFddX40Q.roa (hash: nYuC3F6vhPJEBCLmfMqrTPfplxmjR9SoiZf1ZnDUcP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:42:04:2e:f5:28:13:a1:94:d8:53:86:7a:37:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19981de8b7720394594448b7a0e625c33a38dc66
        Validity
            Not Before: Jul 23 17:00:52 2026 GMT
            Not After : Jul 24 17:00:52 2026 GMT
        Subject: CN=dc17e739e766744ad77c8148aa9a2ae45bd4bce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:7e:9b:61:de:6d:67:65:e0:ab:78:5e:3a:
                    80:b2:7e:71:a0:c0:7c:8d:49:7e:59:ae:d7:1f:7b:
                    cb:40:df:ec:81:bf:e9:83:f8:dd:85:73:07:91:b1:
                    84:a2:3b:87:12:a3:04:64:6d:5e:b5:3a:f6:37:fb:
                    d1:52:2b:ea:bf:eb:31:7e:04:fb:1e:6e:be:f2:1b:
                    39:52:41:b4:5e:3c:90:ee:f7:a8:fe:7f:aa:54:73:
                    e1:24:ea:74:85:d0:ff:ae:77:49:65:8b:5f:c9:0a:
                    4b:ba:b4:5b:c1:50:d3:1f:13:8d:84:71:9e:9d:49:
                    60:a3:72:56:47:37:25:f9:10:a6:cf:d3:49:40:94:
                    7b:e6:74:25:54:2c:d3:b9:d8:eb:94:0b:ba:e8:48:
                    92:05:9a:bb:bc:62:8e:3e:60:51:da:6d:d1:5f:58:
                    28:fa:40:06:a6:f3:80:8a:3b:8f:bd:30:99:02:8e:
                    83:29:97:1c:c6:9e:cc:13:d1:d3:bc:39:85:77:35:
                    63:2e:b6:bb:73:53:62:cb:14:d2:9f:59:49:f0:ca:
                    af:c9:72:bf:3f:f4:f0:3f:6a:d4:17:69:cb:5c:c9:
                    fa:51:31:78:a5:db:4c:c9:8b:f7:40:ad:34:29:22:
                    90:50:58:4c:7d:6d:c5:bd:51:9c:1a:81:3c:bf:f3:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:17:E7:39:E7:66:74:4A:D7:7C:81:48:AA:9A:2A:E4:5B:D4:BC:E4
            X509v3 Authority Key Identifier:
                keyid:19:98:1D:E8:B7:72:03:94:59:44:48:B7:A0:E6:25:C3:3A:38:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZgd6LdyA5RZREi3oOYlwzo43GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/c65e48-31c4-4974-89f4-ac2ae483955e/1/GZgd6LdyA5RZREi3oOYlwzo43GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:08:44:f4:9f:ef:56:06:80:6b:3b:78:de:40:9b:62:3c:7f:
         b8:43:4d:75:35:9b:56:f3:aa:b9:48:3e:3d:d0:28:ca:f9:81:
         d8:56:c5:5c:de:40:4a:b2:4d:e8:d1:f7:46:ec:a7:87:65:63:
         18:5e:8b:42:5c:03:6b:bb:be:4a:64:11:8a:ff:06:88:bb:58:
         00:aa:11:5f:fc:ed:44:ee:d6:5a:6b:95:c6:3a:b6:c7:25:41:
         81:23:53:3a:59:f6:10:ab:95:bc:37:5e:de:27:ed:44:19:d5:
         18:4a:12:f2:32:e7:35:d8:7c:4b:2f:be:aa:a7:36:b6:ff:9c:
         a3:00:b5:bf:4a:e9:50:39:7b:75:e6:93:10:11:44:85:16:c5:
         90:79:44:db:df:76:e6:51:04:53:7e:89:11:98:4c:18:01:60:
         ba:ef:c4:69:81:25:3b:2c:da:40:be:4c:50:9b:77:13:d9:69:
         79:18:3d:89:30:d1:67:5b:cd:50:56:c2:08:e7:91:e2:da:d1:
         cb:53:1d:07:11:5b:35:6d:26:4e:ed:66:81:9b:7d:52:5e:06:
         57:a6:41:20:b6:7e:c6:4f:1a:04:1c:c3:05:75:a4:69:23:4d:
         3c:86:f9:3a:a6:db:6b:ec:15:ab:fa:cb:84:8f:c8:4b:a1:3f:
         3f:73:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:54:24 2026 by rpki-client